Haft 9.1.0: versioned evidence carriers

[m0n0x41d]

Summary

• Resolve [bug] Evidence is DB-only — attached evidence is never written to a git-tracked '.md' carrier #100 by storing every EvidenceRecord as its own versioned .haft/evidence/<id>.md carrier.
• Keep SQLite as the runtime projection and make haft sync import pulled carriers before repairing durable projection debt.
• Fail closed on missing parents, reparenting, malformed carriers, and content conflicts.
• Preserve the existing public input contract; output additions are backward-compatible.
• Include the current bundled FPF source at 036c056e98c38522172c6b7b3ad08214281cc4e4 and TypeEnv 1.6.0.

Release intent

This PR promotes the exact dev candidate for Haft 9.1.0. Release tagging remains contingent on a successful CI and complete race aggregate for the exact main SHA after merge.

Candidate evidence

• Feature PR feat(evidence): add versioned per-record carriers #112 passed Test & Build, lint, all three platform builds, all 12 race shards, and the Race tests aggregate at 7dd80f639a00612f8d6bc077ea21a170686bf354.
• Local merged-candidate checks passed: non-desktop Go suite, go vet ./..., go mod tidy -diff, FPF refresh verification, FPF query token gate, targeted race tests, schema migration 59 test, and darwin-arm64 build.
• P13 consolidated acceptance was skipped by CI design; installed-runtime P14 was not run and is not claimed here.

Fixes #100

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.